$ rpki-client -vvvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft File: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json) Hash identifier: Tjw1rBq3fwqy+qLR4EUxDp7bjZuO4QoRC1HyrX97t4E= Subject key identifier: A7:A0:9B:D6:6E:83:87:48:B9:54:61:EE:FF:8D:ED:39:E5:B4:57:64 Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft Manifest number: 0BAF Signing time: Thu 24 Sep 2026 19:03:17 +0000 Manifest this update: Thu 24 Sep 2026 19:03:16 +0000 Manifest next update: Thu 01 Oct 2026 19:03:16 +0000 Files and hashes: 1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: ZolfpSXRleiqReAaRZfOr6pLZgqDmsPM/ezBdm9DSaA=) 2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: xloPVlSDrLjQBNDWntHn7nwEdIAtctEKPygfcXqspac=) 3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b/lrVR4/X7lgZk63ZwV38PNtuW7iDkYwDp3wzCiuCI4=) 4: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: 4Y3b7k2nPTigUaGbPaUVrcioubstHM/tbJbvPVaNua0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331 Validity Not Before: Sep 24 19:03:16 2026 GMT Not After : Oct 1 19:03:16 2026 GMT Subject: CN=6ab573f4-d433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:19:3d:ae:bb:9e:55:a4:1d:38:84:7d:1f: cf:54:ed:f6:1b:45:52:1a:36:e8:23:d4:64:d0:5c: 4c:3f:20:aa:77:04:b3:72:03:a7:45:ad:a5:b1:62: 84:de:e7:e0:7a:44:33:fd:4e:89:16:63:4d:b8:7c: 7e:ce:a4:ee:22:af:2c:c1:d1:8b:9b:12:3d:aa:36: 48:c4:85:c3:9d:cb:27:21:bb:a2:f4:85:e3:2b:32: e6:74:44:4c:f7:15:4b:72:ee:07:c5:22:55:21:87: 71:f3:dd:9f:83:48:3b:a4:d2:d1:53:61:31:29:6f: 33:c6:fd:d1:52:8d:de:f8:25:25:bb:51:c9:2f:50: 54:91:33:ed:c5:b6:72:5f:ed:b3:03:0a:fb:c0:20: b1:e4:0b:9d:a3:54:bf:a2:93:fd:88:bc:a8:f4:5c: f4:44:34:3b:b7:e1:85:2a:b4:d4:40:b7:7a:fa:33: 37:56:b6:0e:d0:fa:86:8c:59:da:fb:19:f9:4e:c5: a9:3c:69:68:16:e2:87:32:1d:26:1a:8d:e2:0b:2c: e4:01:3b:95:2c:e3:c3:d8:a3:de:b3:a0:ed:ea:6d: 1d:0e:5a:2b:bf:24:bf:08:f5:ae:36:41:b5:d6:fa: e5:6d:13:28:41:62:36:9e:f2:53:f1:47:c7:c6:41: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A0:9B:D6:6E:83:87:48:B9:54:61:EE:FF:8D:ED:39:E5:B4:57:64 X509v3 Authority Key Identifier: keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:38:d1:9d:4f:b1:5e:c4:05:ec:70:32:64:07:33:f1:7e:c9: 24:bd:80:b6:17:ee:2c:b1:2b:53:9a:8c:0e:a1:55:f9:37:69: 92:5c:ec:ca:44:8d:24:cb:f7:47:39:0e:e7:df:0b:6d:c1:7d: ce:38:07:a6:b8:e7:10:9a:e9:5d:1c:26:70:b2:c2:51:ae:57: 55:d5:54:3d:58:1d:01:35:14:e9:2e:b3:e5:4e:7a:9b:d2:b3: 19:bd:5a:8c:10:5c:ee:bc:c9:cf:a0:85:56:fe:7c:48:28:c3: 35:57:ad:f4:8c:2e:26:e0:53:4a:8c:e1:c6:19:4f:98:c6:f6: 33:a1:30:2e:cd:0b:94:da:75:07:d8:ce:7a:9c:ec:85:b2:20: 03:16:9a:c8:fb:ed:4a:a4:97:61:30:61:2e:77:ea:4a:95:9f: 09:fb:a1:97:35:8e:3d:c4:69:73:89:d8:1f:fd:1f:32:7d:5b: 75:14:b7:37:74:27:2f:60:f3:1e:a2:2e:ab:be:65:45:fb:59: 2f:32:73:eb:fc:e5:a1:a6:f1:fc:e8:ac:72:44:11:68:29:84: 42:a9:97:87:1b:b4:9b:e7:c7:45:2a:7f:ec:3a:c9:a1:4a:c3: 5f:b0:ff:67:35:94:b0:4e:a5:6a:21:3b:6a:81:f5:ce:01:6e: e1:72:3e:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz OTBGQjEzMzEwHhcNMjYwOTI0MTkwMzE2WhcNMjYxMDAxMTkwMzE2WjAYMRYwFAYD VQQDEw02YWI1NzNmNC1kNDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c8ZPa67nlWkHTiEfR/PVO32G0VSGjboI9Rk0FxMPyCqdwSzcgOnRa2lsWKE 3ufgekQz/U6JFmNNuHx+zqTuIq8swdGLmxI9qjZIxIXDncsnIbui9IXjKzLmdERM 9xVLcu4HxSJVIYdx892fg0g7pNLRU2ExKW8zxv3RUo3e+CUlu1HJL1BUkTPtxbZy X+2zAwr7wCCx5Audo1S/opP9iLyo9Fz0RDQ7t+GFKrTUQLd6+jM3VrYO0PqGjFna +xn5TsWpPGloFuKHMh0mGo3iCyzkATuVLOPD2KPes6Dt6m0dDlorvyS/CPWuNkG1 1vrlbRMoQWI2nvJT8UfHxkFXgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKegm9Zu g4dIuVRh7v+N7TnltFdkMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2 QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw X1ZDRnZrUm1CU0U1RDdFekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADTjRnU+xXsQF7HAyZAcz8X7JJL2AthfuLLErU5qMDqFV+TdpklzsykSNJMv3 RzkO598LbcF9zjgHprjnEJrpXRwmcLLCUa5XVdVUPVgdATUU6S6z5U56m9KzGb1a jBBc7rzJz6CFVv58SCjDNVet9IwuJuBTSozhxhlPmMb2M6EwLs0LlNp1B9jOepzs hbIgAxaayPvtSqSXYTBhLnfqSpWfCfuhlzWOPcRpc4nYH/0fMn1bdRS3N3QnL2Dz HqIuq75lRftZLzJz6/zloabx/OisckQRaCmEQqmXhxu0m+fHRSp/7DrJoUrDX7D/ ZzWUsE6laiE7aoH1zgFu4XI+qA== -----END CERTIFICATE-----Generated at Sat Sep 26 07:55:59 2026 by rpki-client